NeutrinoBotHack

NeutrinoBotHack Blind SQL injection in Neutrino panel...

PhaseHack

PhaseHack Get Phase botnet login information via blind SQL injection...

isr-sqlget

-- ISR - Infobyte Security Research -- | ISR-sqlget | www.infobytesec.com | ..:: DESCRIPTION ISR-sqlget: It's a blind SQL injection tool developed in Perl. It lets you get databases schemas and tables rows. Using a single GET/POST you can access quietly the database structure and using a single...

BSQLinjector

BSQLinjector BSQLinjector uses blind method to retrieve data from SQL databases. I recommend using "--test" switch to clearly see how configured payload looks like before sending it to an application. Options: root@kitploit: --file Mandatory - File containing valid HTTP request and SQL injection...

Blinder

Blinder Blidner هي مكتبة بايثون صغيرة لأتمتة حقن SQL الأعمى القائم على الوقت باستخدام استعلامات محددة مسبقًا كدوال لأتمتة تطوير إثبات المفهوم السريع. التثبيت يمكنك تثبيت Blinder باستخدام الأمر التالي: pip install blinder أو عن طريق تنزيل المصدر واستيراده يدويًا إلى مشروعك. الاستخدام لاستخدام...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

hakuin

Hakuin هو إطار عمل لتحسين وأتمتة حقن SQL الأعمى BSQLI مكتوب بلغة Python 3. يقوم بتجريد منطق الاستخراج ويسمح للمستخدمين بتفريغ قواعد البيانات من تطبيقات الويب الضعيفة بسهولة وكفاءة. لتسريع العملية، يستخدم Hakuin مجموعة متنوعة من طرق التحسين، بما في ذلك نماذج اللغة المدربة مسبقًا والتكيفية، والتخمي...

SQLbit

SQL Blind Injection Tool A tool for blind SQL injections that uses multithreaded bitwise comparisons to find values of cells in SQL-tables. Works with SQLite at least and supports cookies. It's able to: Search cell values by columns in a table Search characters count in a cells by columns in a...

bbqsql

BBQSQL Un tool di sfruttamento per SQL Injection cieca Indice Cos'è BBQSQL? Panoramica del Readme Utilizzo di alto livello Installazione Opzioni di BBQSQL Panoramica della sintassi delle query Parametri HTTP Esporta configurazione Importa configurazione Hook personalizzati Trovato un bug? Posso...

andor

andor Strumento di Blind SQL Injection con Golang Utilizzo Scarica andor.go e vai nella cartella dove si trova il file andor.go. Quindi digita nel prompt dei comandi: go run andor.go --url "http://deneme.com/index.php?id=1" Nota: Il valore del parametro Get deve essere corretto, altrimenti non...

andor

andor Blind SQL Injection Tool with Golang Usage Download andor.go and go to the folder where the file andor.go located. And type this to command prompt: go run andor.go --url "http://deneme.com/index.php?id=1" Note: Get parameter value must be correct, otherwise it will not work...

HBSQLI

HBSQLI: Tester Automatico per SQL Injection Cieca Basata su Header HBSQLI è uno strumento automatico da riga di comando per eseguire attacchi di SQL Injection Cieca basata su Header su applicazioni web. Automatizza il processo di rilevamento delle vulnerabilità di SQL Injection Cieca basata su...

SqliSniper

Caratteristiche • Installazione • Utilizzo • Esecuzione di SqliSniper • Contributi • SqliSniper è un robusto strumento Python progettato per rilevare SQL injection blind basate sul tempo negli header delle richieste HTTP. Migliora il processo di valutazione della sicurezza scansionando rapidament...

Blisqy

1. Blisqy Blisqy è uno strumento per aiutare i ricercatori di sicurezza web a trovare l'iniezione SQL cieca basata sul tempo negli header HTTP e anche lo sfruttamento della stessa vulnerabilità. Lo sfruttamento consente un lento prelievo di dati da un database attualmente supporta solo...

CVE-2021-32789

CVE-2021-32789 SQL Injection Blind Autenticata. Plugin Wordpress woocommerce versioni = 2.5.0 Installazione root@kitploit: git clone https://github.com/DonVorrin/CVE-2021-32789.git cd CVE-2021-32789 sudo pip install -r requirements.txt Exploit root@kitploit: python3 exploit.py Inserisci URL:...

CVE-2024-34327

CVE-2024-34327 SQL-Injection-Schwachstellenprüfer Dieses Skript V-24-02-001SQLiCheck.py ist ein Proof-of-Concept PoC -Tool, um das Vorhandensein einer zeitbasierten blinden SQL-Injection-Schwachstelle zu überprüfen, die den Endpunkt password-reset-token.php betrifft, identifiziert als...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

CVE-2019-13292-WebERP_4.15

Blind-SQL-Injection-Exploit für WebERP Dies ist ein Python3-Skript, das einen Exploit für eine Blind-SQL-Injection-Schwachstelle in WebERP Version 4.15 demonstriert, ursprünglich entdeckt von Semen Alexandrovich Lyhin am 10. Juni 2019. Der ursprüngliche Exploit ist hier zu finden, und weitere...